Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy discloses that TransUnion collects personal information including identifiers, credit and financial data, demographic information, device and browsing data, and other categories across its consumer and commercial product lines. The specific categories are referenced under the 'Personal information we collect' section linked in the document navigation.
This analysis describes what TransUnion's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the foundational scope of TransUnion's data collection across both FCRA-regulated credit file functions and non-FCRA commercial analytics products, affecting the range of data subject rights and regulatory obligations that apply to different data categories.
Interpretive note: The full text of the 'Personal information we collect' section was not provided in the document excerpt; specific data categories and collection mechanisms cannot be confirmed from the navigation links alone.
The agreement authorizes collection of multiple categories of personal information, with the specific rights and protections available to consumers depending on whether the data is processed under FCRA as consumer report information or under non-FCRA commercial data frameworks.
Cross-platform context
See how other platforms handle Personal Information Collection Scope and similar clauses.
Compare across platforms →Monitoring
TransUnion has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
(1) REGULATORY LANDSCAPE: The scope of personal information collected engages the FCRA (enforced by the CFPB and FTC) for credit and consumer report data, the CCPA/CPRA for California residents (enforced by the California Privacy Protection Agency), and GDPR for EU/EEA data subjects. The distinction between FCRA-covered data and non-FCRA commercial data is material because FCRA imposes permissible purpose restrictions, accuracy obligations, and dispute rights that do not apply to all data categories TransUnion processes. (2) GOVERNANCE EXPOSURE: High. TransUnion's collection of credit, financial, and identity data at scale across both regulated and commercial product lines creates layered compliance obligations. The risk of data category misclassification (treating FCRA-covered data as non-FCRA commercial data) is a documented regulatory concern for consumer reporting agencies. (3) JURISDICTION FLAGS: California residents have CCPA/CPRA rights including the right to know specific categories collected, right to deletion with FCRA-sourced exceptions, and right to opt out of sale or sharing. EU/EEA residents have GDPR Article 13/14 disclosure rights and rights to erasure subject to legal basis exceptions. FCRA dispute rights apply to all US consumers regardless of state. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations receiving TransUnion data as a vendor service should ensure data processing agreements specify the categories of data supplied, permissible uses, and whether the data constitutes consumer report information under FCRA, triggering downstream user certification and adverse action obligations. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a data inventory mapping each TransUnion product to the specific personal information categories collected and the applicable regulatory framework (FCRA vs. non-FCRA), to support accurate privacy notice disclosures and rights response workflows.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the foundational scope of TransUnion's data collection across both FCRA-regulated credit file functions and non-FCRA commercial analytics products, affecting the range of data subject rights and regulatory obligations that apply to different data categories.
The agreement authorizes collection of multiple categories of personal information, with the specific rights and protections available to consumers depending on whether the data is processed under FCRA as consumer report information or under non-FCRA commercial data frameworks.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TransUnion.